Privacy Policy

Last updated: August 18, 2026

Leonardo Duarte Photography (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request information about our photography services, or book a photography session.

1. Who we are

Leonardo Duarte Photography
Website: https://byleoduarte.com
Location: Gozo, Malta

For privacy-related questions or requests concerning your personal information, you can contact us through the contact details available on our website.

2. Information we collect

Depending on how you interact with us, we may collect information such as:

• Your name;
• Email address;
• Telephone or WhatsApp number;
• Instagram username;
• Information you provide when requesting a photography session;
• Your preferred session date, location and type of service;
• Information provided when communicating with us;
• Information necessary to arrange or provide our services.

We may also collect limited technical information when you visit our website, such as browser type, device information, approximate location and website usage information, where applicable.

3. How we use your information

We may use your personal information to:

• Respond to enquiries and messages;
• Provide information about our photography services;
• Check availability and arrange photography sessions;
• Communicate with you before, during and after a session;
• Manage bookings and payments;
• Deliver photography services and galleries;
• Improve our website and services;
• Understand how visitors use our website;
• Protect our website and prevent misuse;
• Comply with applicable legal and regulatory obligations.

We only process personal information for legitimate and specified purposes and seek to collect only information that is relevant to those purposes. This follows the GDPR principles of lawfulness, fairness, transparency, purpose limitation and data minimisation.

4. Legal basis for processing

Depending on the circumstances, we may process your personal information on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent, when you voluntarily provide information or agree to a specific use of your data;
• Contractual necessity, when processing is necessary to provide a service you have requested or to take steps before entering into an agreement;
• Legitimate interests, when processing is necessary for legitimate business purposes and does not override your rights and interests;
• Legal obligations, when processing is necessary to comply with applicable laws.

The GDPR requires organisations to identify and communicate the applicable legal basis when personal data is collected.

5. Photography and images

Photography services involve the creation and delivery of photographic images.

Images created during a photography session may be provided to the client as part of the agreed service.

We will not use photographs of clients for portfolio, website, social media, advertising or other promotional purposes without an appropriate legal basis and, where required, the client’s consent.

If you do not wish your photographs to be used for promotional purposes, you may contact us to discuss your preferences.

6. Website analytics and advertising

Our website and advertising activities may use third-party technologies, such as analytics and advertising tools, to understand website traffic, measure advertising performance and improve our services.

These services may process information such as device information, browser information, website interactions and online identifiers.

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

Advertising platforms, including Meta, may process information according to their own privacy policies and terms when you interact with our advertisements or social media profiles.

When you submit your information through a lead form or advertising platform, such as Meta, the information may be shared with us so that we can respond to your enquiry.

7. Third-party service providers

We may use trusted third-party service providers to operate our business and website, including services used for:

• Website hosting and management;
• Online photography galleries;
• Analytics;
• Advertising;
• Communication and messaging;
• Payment processing.

These providers may process personal information only as necessary to provide their services and, where applicable, under appropriate contractual and data protection safeguards.

8. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining business records, resolving disputes and complying with legal obligations.

The retention period may vary depending on the type of information and the reason it was collected.

9. Your rights

Under applicable data protection law, including the GDPR, you may have the right to:

• Request access to your personal information;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information in certain circumstances;
• Request restriction of processing in certain circumstances;
• Object to certain processing activities;
• Request portability of your personal information where applicable;
• Withdraw consent where processing is based on consent.

These rights are subject to applicable legal conditions and limitations.

If you would like to exercise any of these rights, please contact us using the contact details available on our website.

10. Data security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

11. International data transfers

Some third-party service providers we use may process information outside Malta or the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we seek to ensure that appropriate safeguards are in place as required by applicable data protection law.

12. Children’s privacy

Some of our photography services may involve adult-oriented content and are therefore restricted to clients aged 18 or older.

We do not knowingly collect personal information from children through our website or advertising activities.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The latest version will always be available on this page, with the date of the latest update shown at the top.

14. Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact Leonardo Duarte Photography through the contact information available on our website.

Website: https://byleoduarte.com